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WG  4  Purpose/Focus: 

Analytic  requirements  to  enhance  Operational  Targeting 
and  increase  relevance  for  Cyber  Operations  in  the  Multi- 
Domain  Battlefield.  Specific  areas  will  include  a  discussion 
of  analysis  to  support  determination  of  Militarily  Relevant 
Cyber  Targets,  their  contribution  to  the  Combined  Force 
Commander's  objectives  and  operational  measures  of 
performance  and  effectiveness. 
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Key  data  questions... 

1 .  Determine  combat  assessment  needs  for  operational 
commanders. 

2.  Determine  how  Cyber  operational  effectiveness  is 
measured  wrt  the  CDRS  objectives. 

3.  Determine  “best  of  breed”  methodologies  for 
determining  cyber  MOE,  MOP,  MOO. 

4.  Investigate  and  normalize  analytic  methodologies  that 
support  combat  assessment. 

5.  Recommend  analytic  tools  and  methodologies  support 
combat  assessment  of  Cyber  Operations. 
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Key  data  questions... 

1 .  Determine  combat  assessment  needs  for  operational 
commanders. 

2.  How  do  we  determine  the  operational  impact  of  cyber 
operations  wrt  the  CDRS  objectives? 

■  Operational  effectiveness  and  impact  are 
measured  and  assessed  and  represented  in  the 
same  way  as  traditional  military  operations  at  the 
J  FF/CC  and  above  levels. 

■  There  are  no  differences  in  assessing  the  effects 
of  cyber  or  other  operations  wrt  CDR’s  objectives. 
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Key  data  questions... 

3.  What  is  the  “best  of  breed”  methodology  for 
determining  MOE.  MOP,  MOO  for  cyber  Ops? 

■Current  Methodologies 

■  TRAC  (TRADOC  Analysis)  >  issues  to  measures  (I2M) 

■  Targeting  doctrine 

■  JCIDS 

■  JWAC  -  Modeling  with  a  combination  of  tool  metrics 

■  NPS  >  Defend  attack  defend  (DAD) 

■  Exercises  and  Experiments 

■  Review  historical  LL 

■  Review  CNO  DB 

■  Vignette  based  assessment 
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Key  data  questions... 

4.  Investigate  and  normalize  analytic  methodologies  that 
support  combat  assessment. 

■  Incorporate  Cyber  effects  into  current  models  and 
analytic  tools,  exercises,  wargames  and  experiments 

■  Warfighter  Conference  (Staff  member  from  3,  5 
and  OR  communities) 

■  Tutorials  (How  you  use  the  cyber  tools) 

■  “OR  for  Cyber”  -  Book/Manual 
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Key  data  questions... 

5.  Recommend  analytic  tools  and  methodologies 
support  combat  assessment  of  Cyber 
Operations. 

■  Follow  Joint  Targeting  Doctrine 

■  Apply  JCIDS  to  Cyber  Acquisition 

■  Apply  OR  techniques  to  enhance  exercises  and 
experiments 
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WG  4  Gaps 

•  Data  (availability  and  sharing)  classification  is  not  an  excuse 

•  SysAd  and  Operator  responses 

•  Behavioral  modeling 

•  How  we  deal  with  unknowns  intrusions  and  network  behavior 

•  Understanding  Network  behavior  resilience  /  predictive  analysis 
(**lntel) 

•  Mathematical  understanding  of  effects  from  network  changes  (IONA) 

•  Weapons  surrogate  /  data  substitution  for  modeling  what  level  of 
fidelity 

•  Adversary  network  uses  /  resilience/predictive  analysis  (**  Intel) 

•  Avoid  adversary  detection  /  redirects  /  honey-pots  (*TTP) 

•  Exercises  /  Experiments 
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Tools  required . 

1 .  OR  model(s)  that  employ  cyber  weapons  in  combat  environment  to  enable 
decision  making.... 

2.  Analysis  of  OPLANS  compared  to  current  and  near  term  cyber  capabilities 

3.  Engagement,  Mission  and  Operational  models  and  simulations 

4.  Campaign  level  analytic  support  via  M&S 

5.  Cyber  weapons  effectiveness  data 

6.  Weapons  /  target  planning  tool  (NAWS?) 

7.  Web  interface  data  repository  (MIDB  level  data  -  CNO  DB?) 

Ways  forward 

1 .  Invite  cyber  HQ  E/Greybeards  to  review  and  guide  normalization  of  cyber 
analytic  efforts  (attend  MORSS....) 

2.  Incorporate  OR  methodologies  across  exercise  planning  and  execution 

3.  Conduct  “best  use  of  Cyber  forces”  analyses  and  assessment 

4.  OPLAN  vice  capability  roll  up 

5.  Develop  and  Employ  vignettes  into  War  games/experiments 

6.  Bib/database  of  relevant  cyber  research  and  analytic  tools  (LL) 
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WG  4  Recommendations 


■  Incorporate  cyber  HQE/Greybeards  into  operations,  exercises  and 
analytic  venues  to  help  identify,  promulgate  and  normalize  analytic 
methodologies  that  support  combat  assessment  (attend  MORSS....) 

■  Introduce  and  Incorporate  OR  methodologies  across  exercise  planning 
and  execution 


■  Formalize  OR  as  part  of  the  operational  commander’s  staff  as  active 
participants,  not  only  as  “After  Action”  report  writers 

■  Conduct  “best  use  of  Cyber  forces”  analyses  and  assessment 

■  Command  and  Control  Cost-benefit  analysis  of  COTS  vs  GOTS 

■  Optimize  avenues  of  approach  to  adversary  targets  and  effects 

■  OPLAN  vice  capability  roll  up 

■  Develop  and  Employ  vignettes  into  War  games/experiments 

■  Publish  a  Bibliography/database  of  relevant  cyber  research  and 
analytic  tools  (LL) 

■  A  new  Operations  Research  Manual  for  Cyber  Operations 
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■  Operational  Assessment  at  the  JFC  level  is  not  affected  by  the 
introduction  of  cyber  weapons  and  capabilities 

■  i.e.  cyber  effects  should  be  represented  in  the  same  way  as 
kinetics 


■  Current  analytic  methods  are  applicable,  but  suffer  from  a  lack  of 
valid  shared  DATA  to  support  substantive  analyses 

■  Live  fire  test  capability  across  “live”  ranges  and  the  “real  world” 
are  inadequate  to  support  capability  development  and  analyses 

■  Cyber  M&S  is  evolving  but  is  inadequate  for  effective  effects 
assessment  -  who  is  the  lead  for  cyber  M&S? 

■  OR  community  must  be  involved  at  the  beginning  of  all  operations 
to  adequately  address  combat  assessment  needs 

■  Today's  questions  are  not  unlike  those  posed  and  solved  with 
Airpower,  Space  and  10...  “How  did  OR  assist  their  problems?” 
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Working  Group  4 

Cyber  Force  Application 


Thank  you,  and  good  night! 
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